Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and Security). The supported version that is affected is 11.2.19.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 4.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N).
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpujan2025.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
23 Jun 2025, 18:01
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:oracle:hyperion_data_relationship_management:11.2.19.0.000:*:*:*:*:*:*:* | |
| First Time |
Oracle hyperion Data Relationship Management
Oracle |
|
| References | () https://www.oracle.com/security-alerts/cpujan2025.html - Vendor Advisory |
04 Feb 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
21 Jan 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-21 21:15
Updated : 2025-06-23 18:01
NVD link : CVE-2025-21568
Mitre link : CVE-2025-21568
JSON object : View
Products Affected
oracle
- hyperion_data_relationship_management
CWE
No CWE.